Evilgrade Exploit Toolkit infecting computers that update software online.
We can all agree that software updates are essential for keeping our computer safe and running to the best of its abilities right? What if the software update service was insecure to begin with, where do you go from there?
A malware kit called Evilgrade is currently attacking software update services rendering the update unsafe. According the ZDNet blog, the infection of the systems happen through a man-in-the-middle (DNS, DHCP and ARP spoofing) type of attack where it infects systems through the update process. This allows the attack to happen to a wide range of applications. Below is a list of product updates that may have been attacked.